Commit Graph

  • ba287b247d add krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:34 +00:00
  • de57423148 add krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:30 +00:00
  • a86c4ec9ab Insecure tgs referrals. Love Hörnquist Åstrand 2008-03-24 12:06:26 +00:00
  • 6f69a2b8f9 x Love Hörnquist Åstrand 2008-03-24 12:06:22 +00:00
  • 5586e24dd3 More verbose checks, disable check that no longer works with referrals. Love Hörnquist Åstrand 2008-03-24 12:06:18 +00:00
  • 03092c3e9a Fix [domain_realm] section. Love Hörnquist Åstrand 2008-03-24 12:06:12 +00:00
  • 756ead1cd9 Find_cred to try krb5_cc_retrieve_cred first, remove comment. Love Hörnquist Åstrand 2008-03-24 12:06:08 +00:00
  • 1e5e118bcf Fix error message to match function called. Love Hörnquist Åstrand 2008-03-24 12:06:04 +00:00
  • 92e7251a36 Refactor code to flatten the call-tree. Love Hörnquist Åstrand 2008-03-24 12:06:00 +00:00
  • cd06f67cdb x Love Hörnquist Åstrand 2008-03-24 12:05:56 +00:00
  • c3d816441f x Love Hörnquist Åstrand 2008-03-24 12:05:52 +00:00
  • e5baf09800 Dont try key usage KRB5_KU_AP_REQ_AUTH for TGS-REQ. This drop compatibility with pre 0.3d KDCs. Love Hörnquist Åstrand 2008-03-24 12:05:49 +00:00
  • 50901132f0 Also check KDCOptions->canonicalize when looking for referrals requests. Love Hörnquist Åstrand 2008-03-24 12:05:45 +00:00
  • 098a497638 x Love Hörnquist Åstrand 2008-03-24 12:05:41 +00:00
  • b2aff2d2bd x Love Hörnquist Åstrand 2008-03-24 12:05:38 +00:00
  • ecd4be81f0 set KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:34 +00:00
  • 2b861313a8 set KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:30 +00:00
  • 829360b3f6 Catch KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:26 +00:00
  • 9a041ab3e3 x Love Hörnquist Åstrand 2008-03-24 12:05:22 +00:00
  • 395d4e88af Test TGS referrals. Love Hörnquist Åstrand 2008-03-24 12:05:18 +00:00
  • 3fdb2ae3e3 x Love Hörnquist Åstrand 2008-03-24 12:05:14 +00:00
  • 2f7728caff Add stub --canonicalize implementation. Love Hörnquist Åstrand 2008-03-24 12:05:10 +00:00
  • b9f88cce4c first version of the tgs referrals pathcheck Love Hörnquist Åstrand 2008-03-24 12:05:02 +00:00
  • 68c7f7560e Update to match new API for windc interface. Love Hörnquist Åstrand 2008-03-22 22:20:29 +00:00
  • c008e1015f Attached is a patch that fixes the following: Love Hörnquist Åstrand 2008-03-21 21:37:32 +00:00
  • 20fa0e0ba4 update (c) Love Hörnquist Åstrand 2008-03-21 21:37:27 +00:00
  • c8bbacc95e x Love Hörnquist Åstrand 2008-03-20 08:46:53 +00:00
  • c228c7bc0a Fix sasl-regexp, from Howard Chu. Love Hörnquist Åstrand 2008-03-20 08:46:02 +00:00
  • 18fde62022 x Love Hörnquist Åstrand 2008-03-19 19:46:04 +00:00
  • 3eaa53c066 Try to find unzip. Love Hörnquist Åstrand 2008-03-19 19:45:49 +00:00
  • f47edf11f2 x Love Hörnquist Åstrand 2008-03-19 16:00:51 +00:00
  • bdcafc6d2d Drop unused defined that originates from aes. Love Hörnquist Åstrand 2008-03-19 15:58:50 +00:00
  • 8888b88979 kdc: Provide extended error information in AS-REP error replies. Love Hörnquist Åstrand 2008-03-19 08:57:49 +00:00
  • 15684f3514 Describe certificate matching syntax. Love Hörnquist Åstrand 2008-03-18 16:18:13 +00:00
  • 23895f4fb9 Check for dup aliases before overwriting, pointed out by Johanna Mannung Love Hörnquist Åstrand 2008-03-18 10:14:02 +00:00
  • 3a7287955f x Love Hörnquist Åstrand 2008-03-16 14:30:58 +00:00
  • e4549b08d5 add missing symbols Love Hörnquist Åstrand 2008-03-16 11:35:21 +00:00
  • 784ffbfa6a Make delegated credentials delegated directly, Oleg Sharoiko pointed out that it always didnt work with the old code. Also add som missing cred and context pass-thou functions in the SPNEGO layer Love Hörnquist Åstrand 2008-03-16 11:33:58 +00:00
  • 7dd314d77a x Love Hörnquist Åstrand 2008-03-14 21:29:51 +00:00
  • 6541305988 Adapt to hx509_env changes. Love Hörnquist Åstrand 2008-03-14 21:29:37 +00:00
  • 425c28427f add Zeqing Xia Love Hörnquist Åstrand 2008-03-14 21:15:21 +00:00
  • b0d3b3e16b x Love Hörnquist Åstrand 2008-03-14 21:13:10 +00:00
  • 2f58fa6ccb Test gsskrb5_register_acceptor_identity. Love Hörnquist Åstrand 2008-03-14 21:12:55 +00:00
  • df1cca124b x Love Hörnquist Åstrand 2008-03-14 21:11:21 +00:00
  • 49dffae447 Add test for gsskrb5_register_acceptor_identity. Love Hörnquist Åstrand 2008-03-14 21:10:43 +00:00
  • 7984dfc6b7 x Love Hörnquist Åstrand 2008-03-14 14:53:38 +00:00
  • 00f8b507cb rename to be more consistent, export for teting Love Hörnquist Åstrand 2008-03-14 14:52:48 +00:00
  • 90c30290de Export hx509_query_match_expr. Love Hörnquist Åstrand 2008-03-14 01:23:04 +00:00
  • 7776ed30a9 Add language to support querying certificates to find a match. Support constructs like "1.3.6.1.5.2.3.5" IN %{certificate.eku} AND %{certificate.subject} TAILMATCH "C=SE"". Love Hörnquist Åstrand 2008-03-13 17:35:49 +00:00
  • 08cb59513f Add (c). Love Hörnquist Åstrand 2008-03-12 15:14:55 +00:00
  • b0a619c3aa Add (c). Love Hörnquist Åstrand 2008-03-12 15:14:34 +00:00
  • 62c5f2a505 x Love Hörnquist Åstrand 2008-03-10 15:00:28 +00:00
  • 0968e71694 Try searchin the key by to use by first looking for for PK-INIT EKU, then the Microsoft smart card EKU and last, no special EKU at all. Love Hörnquist Åstrand 2008-03-10 15:00:05 +00:00
  • 1828420cc3 x Love Hörnquist Åstrand 2008-03-09 23:58:11 +00:00
  • 2d405842ad (init_auth): use right variable to detect if we want to free or not. Love Hörnquist Åstrand 2008-03-09 23:57:54 +00:00
  • acd0b08bcf x Love Hörnquist Åstrand 2008-03-09 23:41:01 +00:00
  • aff5c9adc4 Create a new credential cache is ->get_name is called, make acc_initialize() reset the existing credential cache if needed. Love Hörnquist Åstrand 2008-03-09 23:39:25 +00:00
  • 103467b5ec x Love Hörnquist Åstrand 2008-03-09 23:08:53 +00:00
  • 32809668a9 (acc_get_name): just return the cache_name directly instead of trying to resolve it. Love Hörnquist Åstrand 2008-03-09 23:08:32 +00:00
  • 574683e7ab x Love Hörnquist Åstrand 2008-03-09 21:48:09 +00:00
  • bdd75a7ca8 Dont need to set this as the controlling PTY on steams sockets, don't abort on failure. From Harald Barth and Ian Delahorne. Love Hörnquist Åstrand 2008-03-09 21:47:53 +00:00
  • 351161faed x Love Hörnquist Åstrand 2008-02-26 17:01:08 +00:00
  • 2800e5d81a Add more built files so they are distributed. Love Hörnquist Åstrand 2008-02-26 17:00:25 +00:00
  • d635542a92 add hx509_pem_read Love Hörnquist Åstrand 2008-02-26 16:19:36 +00:00
  • fe254dd716 x Love Hörnquist Åstrand 2008-02-26 15:10:18 +00:00
  • c130ec0a6a add missing \ Love Hörnquist Åstrand 2008-02-26 15:09:34 +00:00
  • bafd4055b8 Don't test the chmod 0'ed keytab, since that test doesn't work for root Love Hörnquist Åstrand 2008-02-26 13:19:52 +00:00
  • 84b1e01eea add missing (c) Love Hörnquist Åstrand 2008-02-26 13:13:07 +00:00
  • d9e70f4359 x Love Hörnquist Åstrand 2008-02-26 12:54:59 +00:00
  • 82ece7c43d reshuffle depenencies Love Hörnquist Åstrand 2008-02-26 12:51:46 +00:00
  • 27a3ca100e Add flag to not add gss-api INT|CONF to the negotiation Love Hörnquist Åstrand 2008-02-26 12:40:35 +00:00
  • c4e1402fd8 x Love Hörnquist Åstrand 2008-02-26 12:29:57 +00:00
  • 8348b37a6b Add --pem to cms-verify-sd. Love Hörnquist Åstrand 2008-02-26 12:29:39 +00:00
  • 6ace7f4af6 Test verifying PEM signature files. Love Hörnquist Åstrand 2008-02-26 12:28:52 +00:00
  • 35a3b73c9c Support verifying PEM signature files. Love Hörnquist Åstrand 2008-02-26 12:28:23 +00:00
  • 8eaef94597 x Love Hörnquist Åstrand 2008-02-25 07:40:34 +00:00
  • faa8fc7e88 libhx509_la_OBJECTS depends on hx_locl.h Love Hörnquist Åstrand 2008-02-25 07:40:05 +00:00
  • 1873035d27 Use unsigned char as argument to ctype function, from Michael ven Elst. Love Hörnquist Åstrand 2008-02-25 07:37:57 +00:00
  • 0f10735602 Use unsigned char as argument to isspace(), from Michael ven Elst. Love Hörnquist Åstrand 2008-02-25 07:35:44 +00:00
  • 45b392682d Use unsigned char as argument to isspace(), from Michael ven Elst. Love Hörnquist Åstrand 2008-02-25 07:35:04 +00:00
  • 55da941b89 Clean symlinks and built-files. Love Hörnquist Åstrand 2008-02-24 21:53:03 +00:00
  • bfb75d5e9e Make all apps depend on libroken. Love Hörnquist Åstrand 2008-02-24 10:53:49 +00:00
  • 6ec94c7e5d add version-script.map Love Hörnquist Åstrand 2008-02-24 10:37:21 +00:00
  • 03d304492b add wind_ucs2read. Love Hörnquist Åstrand 2008-02-24 10:13:29 +00:00
  • 806b49d6e8 x Love Hörnquist Åstrand 2008-02-24 09:28:18 +00:00
  • 916d9a67f6 Add LIB_com_err. Love Hörnquist Åstrand 2008-02-24 09:25:52 +00:00
  • 10e990800c x Love Hörnquist Åstrand 2008-02-23 19:59:46 +00:00
  • 7a7e82c7de x Love Hörnquist Åstrand 2008-02-23 19:59:28 +00:00
  • 4f74d0bc58 Add more built files. Love Hörnquist Åstrand 2008-02-23 19:59:06 +00:00
  • 6b4676ac99 (CLEANFILES): add wind.h and wind_err.h and sort. Love Hörnquist Åstrand 2008-02-23 19:57:50 +00:00
  • 97a9211d0b Strip of xn-- that puny-code adds. Love Hörnquist Åstrand 2008-02-23 19:11:18 +00:00
  • c9e0f171f6 x Love Hörnquist Åstrand 2008-02-23 15:24:55 +00:00
  • 427f713155 Add unicode header files. Love Hörnquist Åstrand 2008-02-23 15:24:41 +00:00
  • 72af89aadf x Love Hörnquist Åstrand 2008-02-23 15:04:07 +00:00
  • d1404acc69 Handle c-comments. Love Hörnquist Åstrand 2008-02-23 15:03:48 +00:00
  • 6dc76f4f6f x Love Hörnquist Åstrand 2008-02-23 15:03:24 +00:00
  • 77f0d548bf make AM_CPPFLAGS += Love Hörnquist Åstrand 2008-02-23 15:03:11 +00:00
  • 3efa1c9caf Make DEFAULT_INCLUDES work better, avoid picking up the wrong headerfiles. $(top_builddir)/include vs ${builddir}. Love Hörnquist Åstrand 2008-02-23 15:02:39 +00:00
  • ff89fa19b2 x Love Hörnquist Åstrand 2008-02-23 11:03:09 +00:00
  • b8a771bf3b Make this pass the test cases again. Love Hörnquist Åstrand 2008-02-23 10:58:43 +00:00